Install
RundllInstall
RundllUninstall
ServiceMain
Behavioral task
behavioral1
Sample
5f666f5d9be23a96762cf74c74da034a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f666f5d9be23a96762cf74c74da034a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5f666f5d9be23a96762cf74c74da034a_JaffaCakes118
Size
62KB
MD5
5f666f5d9be23a96762cf74c74da034a
SHA1
4dbb595219210029a3c9ef2eb011d413802a5631
SHA256
4c070a3a07b93384964b310c91cf78642f0a5249da22ac04abe23cf91f46396f
SHA512
bd2e2202388c2382f401a74b016a81061dddf7501cafd8ca54e77213120d29405f986cd4de0d0f26588cbebccaea63a4886a46c059986ef488805060369c5efb
SSDEEP
1536:hKY2ke98i+D+RSk9raeJ0b0vwjrRYECYz7kX7otg0X:hhOR+DASkdd204jrRY4z7kX7oW0X
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5f666f5d9be23a96762cf74c74da034a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Install
RundllInstall
RundllUninstall
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ